Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

12,597 results · Clear filters · Feed

  • High max 8.8

    Security update for the Linux Kernel RT (Live Patch 11 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-32.1 fixes various security issues The following security issues were fixed: - CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252036). - CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister dur…

    first Apr 9, 2026
  • High max 8.8

    Security update for the Linux Kernel RT (Live Patch 13 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-37.1 fixes various security issues The following security issues were fixed: - CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252036). - CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister dur…

    first Apr 9, 2026
  • High max 7.8

    Security update for the Linux Kernel RT (Live Patch 14 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-38.1 fixes various security issues The following security issues were fixed: - CVE-2025-40159: xsk: Harden userspace-supplied xdp_desc validation (bsc#1253404). - CVE-2025-71120: SUNRPC: svcauth_gss: avoi…

    first Apr 9, 2026
  • High max 8.8

    Security update for the Linux Kernel (Live Patch 9 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-31.1 fixes various security issues The following security issues were fixed: - CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252036). - CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister dur…

    first Apr 9, 2026
  • High max 8.8

    Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-29.1 fixes various security issues The following security issues were fixed: - CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252036). - CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister dur…

    first Apr 9, 2026
  • High max 8.8

    Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-35.1 fixes various security issues The following security issues were fixed: - CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252036). - CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister dur…

    first Apr 9, 2026
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-36.1 fixes various security issues The following security issues were fixed: - CVE-2025-40159: xsk: Harden userspace-supplied xdp_desc validation (bsc#1253404). - CVE-2025-71120: SUNRPC: svcauth_gss: avoi…

    first Apr 9, 2026
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-39.1 fixes various security issues The following security issues were fixed: - CVE-2026-23074: net/sched: Enforce that teql can only be used as root qdisc (bsc#1258051). - CVE-2026-23111: netfilter: nf_ta…

    first Apr 9, 2026
  • High max 7.5

    Security update for glibc

    This update for glibc fixes the following issues: - CVE-2026-4437: incorrect DNS response parsing via crafted DNS server response (bsc#1260078). - CVE-2026-4438: invalid DNS hostname returned via gethostbyaddr functions (bsc#1260082).

    first Apr 9, 2026
  • High max 8.8

    Security update for the Linux Kernel RT (Live Patch 6 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-28.1 fixes various security issues The following security issues were fixed: - CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252036). - CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister dur…

    first Apr 9, 2026
  • High max 8.8

    Security update for the Linux Kernel RT (Live Patch 9 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-33.1 fixes various security issues The following security issues were fixed: - CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252036). - CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister dur…

    first Apr 9, 2026
  • High max 8.8

    Security update for the Linux Kernel RT (Live Patch 10 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-34.1 fixes various security issues The following security issues were fixed: - CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252036). - CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister dur…

    first Apr 9, 2026
  • High max 8.8

    Security update for the Linux Kernel RT (Live Patch 8 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-31.1 fixes various security issues The following security issues were fixed: - CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252036). - CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister dur…

    first Apr 9, 2026
  • High max 8.8

    Security update for the Linux Kernel RT (Live Patch 12 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-36.1 fixes various security issues The following security issues were fixed: - CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252036). - CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister dur…

    first Apr 9, 2026
  • High max 7.6

    Security update for libpng16

    This update for libpng16 fixes the following issues: - CVE-2026-33416: use-after-free via pointer aliasing in `png_set_tRNS` and `png_set_PLTE` can lead to arbitrary code execution (bsc#1260754). - CVE-2026-33636: out-of-bounds read/write in the palette expan…

    first Apr 9, 2026
  • High max 8.8

    Security update for the Linux Kernel RT (Live Patch 13 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-37.1 fixes various security issues The following security issues were fixed: - CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252036). - CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister dur…

    first Apr 9, 2026
  • High max 7.8

    Security update for the Linux Kernel RT (Live Patch 14 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-38.1 fixes various security issues The following security issues were fixed: - CVE-2025-40159: xsk: Harden userspace-supplied xdp_desc validation (bsc#1253404). - CVE-2025-71120: SUNRPC: svcauth_gss: avoi…

    first Apr 9, 2026
  • High max 7.8

    Security update for the Linux Kernel RT (Live Patch 15 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-39.1 fixes various security issues The following security issues were fixed: - CVE-2025-71120: SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf (bsc#1256780). - CVE-20…

    first Apr 9, 2026
  • High max 8.8

    Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-32.1 fixes various security issues The following security issues were fixed: - CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252036). - CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister dur…

    first Apr 9, 2026
  • High max 8.8

    Security update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-34.1 fixes various security issues The following security issues were fixed: - CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252036). - CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister dur…

    first Apr 9, 2026
  • High max 8.8

    Security update for the Linux Kernel RT (Live Patch 7 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-30.1 fixes various security issues The following security issues were fixed: - CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252036). - CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister dur…

    first Apr 9, 2026
  • High max 8.8

    Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-29.1 fixes various security issues The following security issues were fixed: - CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252036). - CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister dur…

    first Apr 9, 2026
  • High max 8.8

    Security update for the Linux Kernel (Live Patch 8 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-30.1 fixes various security issues The following security issues were fixed: - CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252036). - CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister dur…

    first Apr 9, 2026
  • High max 8.8

    Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-35.1 fixes various security issues The following security issues were fixed: - CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252036). - CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister dur…

    first Apr 9, 2026
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-36.1 fixes various security issues The following security issues were fixed: - CVE-2025-40159: xsk: Harden userspace-supplied xdp_desc validation (bsc#1253404). - CVE-2025-71120: SUNRPC: svcauth_gss: avoi…

    first Apr 9, 2026
  • High max 8.8

    Security update for the Linux Kernel (Live Patch 9 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-31.1 fixes various security issues The following security issues were fixed: - CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252036). - CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister dur…

    first Apr 9, 2026
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-38.1 fixes various security issues The following security issues were fixed: - CVE-2025-71120: SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf (bsc#1256780). - CVE-20…

    first Apr 9, 2026
  • High max 7.5

    Security update for glibc

    This update for glibc fixes the following issues: - CVE-2026-4437: incorrect DNS response parsing via crafted DNS server response (bsc#1260078). - CVE-2026-4438: invalid DNS hostname returned via gethostbyaddr functions (bsc#1260082).

    first Apr 9, 2026
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-39.1 fixes various security issues The following security issues were fixed: - CVE-2026-23074: net/sched: Enforce that teql can only be used as root qdisc (bsc#1258051). - CVE-2026-23111: netfilter: nf_ta…

    first Apr 9, 2026
  • High max 7.6

    Security update for libpng16

    This update for libpng16 fixes the following issues: - CVE-2026-33416: use-after-free via pointer aliasing in `png_set_tRNS` and `png_set_PLTE` can lead to arbitrary code execution (bsc#1260754). - CVE-2026-33636: out-of-bounds read/write in the palette expan…

    first Apr 9, 2026
  • High max 8.1

    Security update for openssl-3

    This update for openssl-3 fixes the following issues: - CVE-2026-28387: Potential use-after-free in DANE client code (bsc#1260441). - CVE-2026-28388: NULL Pointer Dereference When Processing a Delta CRL (bsc#1260442). - CVE-2026-28389: Possible NULL dereferen…

    first Apr 8, 2026
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.9.1 fixes various security issues The following security issues were fixed: - CVE-2025-71120: SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf (bsc#1256780). -…

    first Apr 10, 2026
  • High max 8.8

    Security update for the Linux Kernel RT (Live Patch 5 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-25.1 fixes various security issues The following security issues were fixed: - CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252036). - CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister dur…

    first Apr 9, 2026
  • High max 7.5

    Security update for glibc

    This update for glibc fixes the following issues: Security fixes: - CVE-2026-4437: incorrect DNS response parsing via crafted DNS server response (bsc#1260078). - CVE-2026-4438: invalid DNS hostname returned via gethostbyaddr functions (bsc#1260082). Other fi…

    first Apr 10, 2026
  • High max 8.2

    Security update for python-cryptography

    This update for python-cryptography fixes the following issues: - CVE-2026-34073: Fixed X.509 bypass of name constraints on wildcard SANs with matching peer names. (bsc#1260876) - CVE-2026-26007: missing validation can lead to security issues for signature ve…

    first Apr 10, 2026
  • High max 8.8

    Security update for zlib

    This update for zlib fixes the following issues: - CVE-2026-27171: Fixed an infinite loop via the crc32_combine64 and crc32_combine_gen64 functions due to missing checks for negative lengths. (bsc#1258392) - CVE-2023-45853: Fixed an integer overflow and resul…

    first Apr 9, 2026
  • High max 7.8

    Security update for the Linux Kernel RT (Live Patch 2 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.7.1 fixes various security issues The following security issues were fixed: - CVE-2025-40159: xsk: Harden userspace-supplied xdp_desc validation (bsc#1253404). - CVE-2025-71120: SUNRPC: svcauth_gs…

    first Apr 9, 2026
  • High max 8.8

    Security update for the Linux Kernel RT (Live Patch 1 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.6.1 fixes various security issues The following security issues were fixed: - CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252036). - CVE-2025-40018: ipvs: Defer ip_vs_ftp unregis…

    first Apr 9, 2026
  • High max 8.8

    Security update for the Linux Kernel RT (Live Patch 0 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.5.1 fixes various security issues The following security issues were fixed: - CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252036). - CVE-2025-40018: ipvs: Defer ip_vs_ftp unregis…

    first Apr 9, 2026
  • High max 7.8

    Security update for the Linux Kernel RT (Live Patch 3 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.8.1 fixes various security issues The following security issues were fixed: - CVE-2025-71120: SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf (bsc#1256780). -…

    first Apr 9, 2026